Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Unauthenticated attackers can retrieve full list of users associated with arbitrary accounts.Check if you run itEPSS 0.31%Apr 15, 2025
- Medium6.9Unauthenticated attackers can add devices of other users to their scenes (or arbitrary scenes of other arbitrary users).Check if you run itEPSS 0.65%Apr 15, 2025
- High7.5conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting.Check if you run itEPSS 0.26%Apr 15, 2025
- Medium6.9Unauthenticated attackers can rename "rooms" of arbitrary users.Check if you run itEPSS 0.30%Apr 15, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoodLayers Tourmaster tourmaster allows Reflected XSS.This issue affects TourmCheck if you run itEPSS 0.24%Apr 15, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dzynit SEO Tools seo-automatic-seo-tools allows Reflected XSS.This issue affecCheck if you run itEPSS 0.24%Apr 15, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Stored XSS.TCheck if you run itEPSS 0.22%Apr 15, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scottwallick Easy Contact easy-contact allows Reflected XSS.This issue affectsCheck if you run itEPSS 0.24%Apr 15, 2025
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Upload a Web Shell to a Web Server.Check if you run itEPSS 0.24%Apr 15, 2025
- Medium5.4Path Traversal vulnerability in NotFound WPJobBoard allows Path Traversal.Check if you run itEPSS 0.33%Apr 15, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rentaCheck if you run itEPSS 0.65%Apr 15, 2025
- Medium6.9Unauthenticated attackers can retrieve serial number of smart meters associated to a specific user account.Check if you run itEPSS 0.31%Apr 15, 2025
- High7.5Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Unlimited TCheck if you run itEPSS 0.46%Apr 15, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT BlCheck if you run itEPSS 0.28%Apr 15, 2025
- Medium6.5Improper Control of Generation of Code ('Code Injection') vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Code Injection.This issue affects Sign-up Sheets: fromCheck if you run itEPSS 0.32%Apr 15, 2025
- High7.5Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu: from n/a through <= 2Check if you run itEPSS 0.46%Apr 15, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in covertnine C9 Blocks c9-blocks allows DOM-Based XSS.This issue affects C9 BlocCheck if you run itEPSS 0.27%Apr 15, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AddonsPress Nepali Date Converter nepali-date-converter allows Stored XSS.ThisCheck if you run itEPSS 0.27%Apr 15, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in graphthemes Glossy Blog glossy-blog allows Stored XSS.This issue affects GlossCheck if you run itEPSS 0.27%Apr 15, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in alleythemes Home Services home-services allows DOM-Based XSS.This issue affectCheck if you run itEPSS 0.27%Apr 15, 2025
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in LiquidThemes AI Hub aihub allows Upload a Web Shell to a Web Server.This issue affects AI Hub: from n/a through <=Check if you run itEPSS 0.47%Apr 15, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainá taina allows Stored XSS.This issue affects Tainá: from n/a throCheck if you run itEPSS 0.27%Apr 15, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gurmehub Kargo Entegratör kargo-entegrator allows SQL Injection.This issue affCheck if you run itEPSS 0.44%Apr 15, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ren Ventura WP Delete User Accounts wp-delete-user-accounts allows DOM-Based XCheck if you run itEPSS 0.27%Apr 15, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in RealMag777 InPost Gallery inpost-gallery allows Cross Site Request Forgery.This issue affects InPost Gallery: from n/a through <=Check if you run itEPSS 0.17%Apr 15, 2025
Sort